This topic is waaaay old now, but it is worth noting that hiding the history tab is one thing, but a person can still view the history by using a direct URL e.g. https://example.com/index.php?title=something&action=history